Systems and methods for securely managing biometric data

Abstract

Systems and methods for securely managing biometric data are provided. In a method conducted at a secure element which is directly connected to a biometric input, biometric data is received directly from the biometric input. A biometric signature based on the biometric data is obtained. A seed value specific to the biometric data is accessed by obtaining the seed value from the biometric data or biometric signature. The biometric signature is encoded using an obscured algorithm and the seed value to generate a token which is output for secure storage within the secure element or secure transmission to a secure server for registration or authentication of the biometric data. Obtaining the seed value from the biometric data or biometric signature can be repeated reliably to obtain the same the seed value

Description

CROSS REFERENCE TO RELATED APPLICATION[0001]This application is a National Stage of International Application No. PCT / IB2016 / 050696 filed Feb. 10, 2016, and which claims the benefit of from South African provisional patent application number 2015 / 00962 filed on 11 Feb. 2015, of which are all herein incorporated by reference.FIELD OF THE INVENTION[0002]This invention relates to systems and methods for securely managing biometric data.BACKGROUND TO THE INVENTION[0003]The use of biometric information for authentication purposes is increasing. Biometric readers, such as fingerprint readers, have been used for some time in authorizing a user's access to facilities or resources. More recently, some mobile phones are being provided with biometric readers for restricting access to certain, preregistered users.[0004]Biometric authentication provides advantages in that it can be easier for users to provide biometric information in order to be authenticated than, for example, entering a user n...

AI Technical Summary

Benefits of technology

Enhances the security of biometric authentication by allowing secure storage and transmission of biometric data, enabling secure authentication without exposing the original data, and allowing for token revocation if compromised, thus mitigating risks associated with biometric data exposure.

Problems solved by technology

However, unlike a username and password, biometric information cannot be changed and, once compromised, should not be reused.

This may limit the application of biometric authentication severely as, for example, once a user's fingerprint registered with a biometric authentication service has been leaked to a fraudster, the registration of the fingerprint should be revoked and the compromised fingerprint should not be used for further authentication purposes.

This shortcoming of biometric authentication may be exacerbated by existing systems and methods which inadequately protect biometric information in biometric registration and biometric challenge stages.

Images